Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Advertisements

sub101uk

Posted 22 January 2017 - 06:23 PM

sub101uk

Member

Topic Starter

Member

39 posts

So far for the last few days there has been no errors to report , As mouse I still seem to be ok but if I give it a VEW check you might get the odd fall out of Blue Tooth but the mouse feels fine I have removed the Logitech mouse and just using the microsoft 5000 at the moment so far all is ok but I still think all my problems are coming from my ISP TOT since I use a VPN to watch the BBC . All ok on one of the chat rooms Thaiflirting having 3 connections yes that is a bit strange .

So far not much to report but at the start of each day I reset the logs and check before I turn off but only got under 2 weeks before I head back to the UK then I can re strip the fan out and go over it with the vacuum cleaner I also want to change out the C drive for a 1TB drive .

Should any strange things happen I will record and let you know thanks again for all your help .

RKinner

Posted 22 January 2017 - 09:31 PM

RKinner

Malware Expert

Expert

20,333 posts

The excess heat sometimes dries out the thermal pads so if you are planning to clean it again you might want to remove them, clean the surfaces and recoat with Arctic Silver 5 per the instructions on their website. I like the kit you can get from Amazon which has the thermal paste plus a cleaner and a surface prep.

sub101uk

Posted 23 January 2017 - 04:54 AM

sub101uk

Member

Topic Starter

Member

39 posts

Well its been a interesting day , I do have a built in web cam in this lap top but I did buy a few months ago a HD web cam a HP 4310 , Well I plugged the camera in today and clicked on the standard web cam control software but any icon I clicked on I got a error message " Windows cannot find " \Webcam Companion 4.5\uWebcam.exe " So thinking there was a problem I went to the HP web site and down loaded all new software but its still the same .Any thoughts ?

Now the camera is working because I can see the output via skype but for some strange reason when you go to the HP web site it does not detect the web cam , Now I did down load some other Arc software and that works fine but the HP 4310 web camera wont work ?

Plus some thing kept on turning my wifi off then when I wanted to do screen grabs JPG pics were coming out in text format , I did take a VEW log but I still think as soon as I return to the Uk I will do a total rebuild . There is a few bluetooth errors there but the mouse seem to be ok and nothing like before were you could not use the BlueTooth mouse .

When I do strip the machine down yes I fully understand working on PCBs but I will have full access to all that is required when I return back to the UK ..

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 23/01/2017 17:44:36

Log: 'System' Date/Time: 23/01/2017 09:19:10
Type: Error Category: 0
Event: 7032 Source: Service Control Manager
The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Human Interface Device Access service, but this action failed with the following error: An instance of the service is already running.

Log: 'System' Date/Time: 23/01/2017 09:19:10
Type: Error Category: 0
Event: 7032 Source: Service Control Manager
The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the WLAN AutoConfig service, but this action failed with the following error: An instance of the service is already running.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7032 Source: Service Control Manager
The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Network Connections service, but this action failed with the following error: An instance of the service is already running.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Portable Device Enumerator Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The WLAN AutoConfig service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Desktop Window Manager Session Manager service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Distributed Link Tracking Client service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Superfetch service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Program Compatibility Assistant Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Network Connections service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Human Interface Device Access service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Offline Files service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Log: 'System' Date/Time: 23/01/2017 09:17:10
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Audio Endpoint Builder service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

sub101uk

Posted 24 January 2017 - 12:20 AM

sub101uk

Member

Topic Starter

Member

39 posts

Well I am 100 % sure that my ISP TOT in Thailand has access to my computer and just playing games with me as someone un clicked my link to my router as for HP Webcam Control if you click on 2 Run as Admin " it works other wise all you get is that error message . Its strange for the past 18 months HP webcam Control has been working fine .

From looking at the error message its very clear there is a Fatal Hardware problem However I think this message is false if I had this type of problem when the computer is just in stby mode the problem would show up on the lap tops own diagnostic program which is a few hours long plus Dells own 4 hour web site test . If you have program down your end that I could try please pass it along and it it still shows there is no hard ware problem then I am sure its down malware ware .The only way I think we are going to put a stop to it is by doing a total rebuild . I wanted to change out C drive any way since its only a 250 Gb and go for a 1 TB plus dont forget my router is wide open you cannot lock it with password as the default password works with this in mine I cant do that much until I get back to the and change my ISP . This morning I notice there was a down load going so I clicked on TCPview to see who was down loading to my computer but the display on the TCP program was frozen on " Time and Wait " After about 5 minutes it started to work again but by this time the down load seem to have stopped .

Do you know if they have released the new version of Hi Jack This yet ? that might give you some idea of whats going on over here . Ok I have done a FRST scan so have a look see and see what you think .

sub101uk

Posted 25 January 2017 - 01:24 AM

sub101uk

Member

Topic Starter

Member

39 posts

I fully understand that you can only comment on the reports that VEW reports but the router is only 6 feet away from where I am sitting so can get some idea of data coming in because the incoming data light on the router are not lit when ever I get one of these online attacks the incoming data light is fully on plus if I turn the router off the computer is fine .

I have very limited knowledge on the software side of things but have been dealing with computer hardware since the good old days of having a 286 ,386 and 486 processors if you had any of the faults that VEW is reporting I think you would have a very unstable machine in all stages ,

This 17 inch Dell I use every day , It does not crash and seems stable I have carried out the computers own diagnostic check and nothing found same goes for the Dell web site test nothing found , Maybe you have some other test program we could run it would be good if the hardware was found to be faulty but I dont think that is the case I think the fault is being reported are being induced : - .

I think the only way to prove this is putting the computer ( Off Line ) on a soak test with some other testing program , If the processor is found to be faulty then it will be replaced .

All ok on there will be no new release of " Hi Jack This " since the new owners killed it off . Anyway I will be back in the UK in less than 2 weeks and I have a feeling once I use a different ISP I think things will be back to normal again but I still will be changing the old 250 Gb hard drive and fitting a 1TB drive .

RKinner

Posted 25 January 2017 - 06:25 AM

Always run a temperature monitoring program like speedfan while Prime95 is running as it will quickly cause most PCs to overheat. Use Task Manager or Process Explorer to stop it - just killing the window doesn't stop the program.

When you upgrade the hard drive, stay away from Seagate. They do not hold up. I recommend Western Digital Blacks. Slightly more expensive but much better warranty and they last a lot longer.

TCPView is about the best program I know for monitoring traffic. If it doesn't show heavy traffic then it's hard to say what's going on. Your ESET firewall should be keeping out normal attacks and none of my software has shown anything strange running on your system. You might try autoruns from

sub101uk

Posted 25 January 2017 - 09:59 PM

sub101uk

Member

Topic Starter

Member

39 posts

This morning I reset the logs and within 30 mins I noticed that something had started to down load , I checked to see if there was any updates due but nothing , The computer was not in use and just in idle mode . I ran the TCP IP program to see who was connect to me and it seem to be coming from Yahoo . Yes I was connected to Yahoo mail but that was about it ?

I ran the VEW program and it looks like a war zone :-

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 26/01/2017 10:29:04

Log: 'System' Date/Time: 26/01/2017 03:00:04
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 26/01/2017 03:00:03
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 5 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 6 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Log: 'System' Date/Time: 26/01/2017 02:57:19
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 7 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 1 seconds since the last report.

Looks a mess what do you make of this warning " The speed of processor 6 in group 0 is being limited by ( system firmware ). The processor has been in this reduced performance state for 1 seconds since the last report. " ?

Yes I will down load a copy of Prime95 and also give cpuid a go but I am 100% that these errors are induced but I will run all these test and get back to you . As far as the new hard drive I was thinking of this one .

If nothing is found on this test then I think we are chasing our own tails but within a week of being back in the UK using a different ISP I think these attacks will fade away but I will proceed changing over the hard drive any and doing a re build but I would love to have the old hard drive scanned and find out whats on there .

Attached Thumbnails

Advertisements

RKinner

Posted 25 January 2017 - 10:46 PM

The speed of processor 6 in group 0 is being limited by ( system firmware ). The processor has been in this reduced performance state for 1 seconds since the last report. " ?

Some energy saving BIOS's will do this if it's idle. The other cause is overheating.

Sometimes you can look at a series of events and find the earliest and if you can stop that event from happening the rest may not happen but in this case it appears that the list was cut off (just too many events) before the triggering event. You would have to go into the event viewer, windows logs, System to see what the earliest failure

Any drive is OK as long as it's not a Seagate. I think Western Difgital and Hitachi just merged at the end of last year.

sub101uk

Posted 26 January 2017 - 07:42 PM

sub101uk

Member

Topic Starter

Member

39 posts

Thanks for the information , I down loaded Prime95 and its been running now for about 20 hours it set to finish about the 1st of feb , Thats strange when I do screen grabs its not coming out as a JPG format but text file took me 3 attempts to be able to save in JPG . As far as the test goes all ok so far .

All ok on the replacement HD yes there half the price over in Asia compare with the price in the Uk but I will get this HD before I leave . Well 5 more days before the test finishes . I seem to be getting this message regarding another computer with the same IP address as my computer .System Event Log attached .

RKinner

Posted 26 January 2017 - 08:20 PM

sub101uk

Posted 26 January 2017 - 10:33 PM

sub101uk

Member

Topic Starter

Member

39 posts

Oh its the wrong software but this is Prime 95 So I dont know ? Sorry but I have never used this program before I have attached the main page of the test , Please confirm this is the wrong program and I will stop it , But looking at the options you have Torture test so I think its the right program but the wrong test .